AI Daily Digest

4sections
9news items
1paper
1open-source project
24 hours of news
Audio · Chinese
Issue 23 · About 11 min 56 sec · AI-generated audio
Sonnet 5.5, External Agent Safeguards, and AMD’s World Labs Agreement
Tuesday’s main news window runs September 28 at 06:00 through September 29 at 06:00 Beijing time (UTC+8), or September 27 at 22:00 through September 28 at 22:00 UTC. Discovery looks back 72 hours. Several laboratories and chip companies announced updates overnight: Claude Sonnet 5.5, NVIDIA’s open agent-safety platform and xAI Team Bots. Original publication dates are retained.

Industry Insights

Conversation Spotlight
Original publication/submission: 2026-09-29

Our take: agent safety is separating into model, runtime and out-of-band layers

Sonnet 5.5’s cyber/distillation defenses, Managed Agents’ credential isolation, and NVIDIA OpenShell/Sentry point toward an approach: when model alignment is insufficient, place constraints on what can be done beyond the model’s control. This is editorial inference, not a deployment checklist verified by any announcement.

Assess whether policies can be proven—OpenShell mentions a policy prover—whether an out-of-bounds action can be stopped in milliseconds, and whether audit logs are outside agent write access. Collaboration lists without shutdown latency and failure modes still leave response reliability unclear.

Source: Our analysis · Based on official announcements · Original publication/submission: 2026-09-29 · Editorial inference, not an experimental finding

Research Briefs

1 paper
01AgentWorld measures which collaborative actions actually contribute to success
ResearchOriginal publication/submission: 2026-09-25Full-paper task design, experimental setup, and Tables 2/3; not reproduced

The preprint was first submitted September 25 at 17:44 UTC and discovered via the September 28 HF list. It is older material read later, not a September 29 publication. This issue reviewed v1’s task design, setup and Tables 2 and 3 without reproduction.

The MMORPG sandbox contains 100 manually annotated tasks and 100 augmented variants. Teams of three to 20 agents have asymmetric capabilities and roles, usually with 25–55-round budgets. They cannot inspect teammates’ internal state, communicating through in-world messages. Thirteen high-level tools wrap movement, gathering, crafting and other low-level actions to focus measurement on division of labor and coordination.

The four main models—Gemini 3 Flash, Claude Haiku 4.5, GPT-5 Mini and DeepSeek R1-70B—use identical prompt templates and tools. Success on the main set is 52%, 45%, 36% and 20% respectively; on the augmented set it is 24%, 26%, 21% and 10%. This ranks specified models in that environment, not today’s latest models generally.

The paper’s CCE traces causal relationships backward to estimate the proportion of actions contributing to success. The best main-set model has mean CCE 0.320, but failed tasks are defined as zero; it does not imply every successful task wastes 68% of its actions. CCE uses model judgments of causality. Different judges preserved rankings while changing absolute values.

Table 3 compares Gemini 3 Flash settings: 52% default multi-agent success, 22.9% without communication, and 60% with one agent seeing all messages and coordinating. Shared progress helps but does not remove long planning and resource-allocation problems. Our view is to examine completed handoffs and feedback-driven plan updates, beyond agent count. The game setting, fixed tools and model versions limit transfer to enterprise work.

arXiv 2609.31590v1 →

Open Source Spotlight

1 project
Reading note
Based on official documentation; no deployment tests were performed. Inclusion here is a tool-discovery recommendation, not a claim that each project was first released today.
1
H Company Holo4 offers open weights for general computer useModel cards require item-by-item review; no commercial-license assurance

H Company’s September 28 HF blog introduces dense Holo4 27B, Holo4 35B-A3B MoE and Holotron4 Nano, post-trained from Nemotron 3 Nano Omni. Agents can use GUI, code, MCP and APIs. The authors report Holo4 27B at 61.7% on OSWorld 2.0, compared with Opus 5.5 at 81.8% in the article. Weights include BF16, FP8, NVFP4 and GGUF; benchmark trajectories are public.

Individual licenses must be checked in model cards. They were not all reviewed here, so unrestricted commercial use is not promised across the family. Results are author-reported and subsets or harnesses may differ. Only the official blog was read, without deployment or testing. Discovery today is not first appearance on September 29.

Coverage notes · Incomplete · 24/32 checks recorded

Collection was incomplete: 24 of 32 sources completed entry-point and window checks; eight were partial, giving 75%; all core sources completed this run’s checks. Completing a source does not mean reading every listed article. Gaps remain for Microsoft AI, Tongyi, Z.ai, StepFun, Mistral updates, OpenReview, 36Kr and ByteDance Seed. Entries without demonstrated window coverage are not labeled no updates.

The main window is September 28 at 06:00 to September 29 at 06:00 Beijing time; discovery begins September 26 at 06:00. Trusted receipts from the upstream 16-source set, checked through 05:18:53, were reused while checking the other 16, failures/partial sources and increments to 06:00. Upstream had already published the article; this run prepared missing revisions and audio for the 07:50 publishing phase. Configuration/manuscript baseline: 10c519f329a10426b3790d9c25f212e368d37868; upstream Concourse/news handoff: 5f7afd38a670ffe8b1a0d9a280337b61b5333c95.

There are twelve editorial items: five stories, one observation, one paper, one open-weight feature and four briefs. Basis is only an accompanying note. AgentWorld is an older-paper follow-up; HF listing and arXiv submission dates are separate. Unread papers remain awaiting review without invented rejection reasons. Topic tracking continues for agents/memory/tools and evaluation/reliability/safety.

Trial media: TechCrunch provided an independent AMD lead traced to the official release; one 404 Media investigation was used with its verification boundary stated. Ars’s training-pause story repeated yesterday’s event and was not repeated. MIT Technology Review’s science/responsibility discussion remained for background review. Promotions were excluded; paid-access and material limits were recorded as encountered.

Coverage gaps reflect incomplete checks; they do not establish that a source had no updates.

  • Microsoft AI — Partially checked. The accessible Microsoft list did not provide reliable publication dates or establish complete coverage of the original discovery window.
  • Tongyi Lab — Partially checked. The official product or research entry point did not establish a complete, reliably dated publication list.
  • Z.ai — Partially checked. The original check was partial; complete dates or discovery-window coverage were not established. Details are retained in the historical coverage notes.
  • StepFun — Partially checked. The product page did not provide a complete dated publication stream; preview or countdown text is not a publication timestamp.
  • Mistral — Partially checked. Selected material was readable, but the visible updates list did not establish complete, reliably dated window coverage.
  • OpenReview — Partially checked. Homepage or venue access did not establish complete submission coverage through the discovery-window boundary.
  • 36Kr AI (article-level checks for original and syndicated reporting) — Partially checked. The mixed list included syndicated material and relative dates; absolute dates and the full 72-hour lower boundary were not completely checked.
  • ByteDance Seed · Blog and papers — Partially checked. The featured or recommended area did not establish complete coverage across all research categories.

Reviewing a source does not constitute independent testing. Paper-reading scope is stated with each item; experiments were not reproduced.

AI-assisted translation, checked against the Chinese edition. Read the Chinese edition.